Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 78.191.12.29 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:78.191.12.29
Hostname:78.191.12.29.dynamic.ttnet.com.tr
AS number:AS9121
AS name:TTNET
Country:- TR
First seen:2021-12-10 14:42:25 UTC
Last online:2021-12-11 22:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse compltain sent?Last online (UTC)
2021-12-10 14:42:2578.191.12.29995
QakBot
Offline
Yes (2021-12-10 14:45:04 UTC)2021-12-11 22:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 78.191.12.29. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2021-12-17 05:59:44bb17bf13123596ba3065efc74d625a3cExecutable exen/a
n/a
2021-12-15 17:07:029b94df46dae77e2e38e2e11c26ed2e25Executable exen/a
n/a
2021-12-14 14:43:223142cbf3b97b301f787b5dfdde5e4b62Executable exen/a
n/a
2021-12-13 16:41:120f695430614b093c07e6409eeaf652b8DLL dlln/a
Quakbot
2021-12-11 14:27:38ef5cb7e46ad65a34b56323a1364a74c7DLL dlln/a
Quakbot
2021-12-11 14:26:37c67677729461a46f93f5047d0fe4d623DLL dlln/a
Quakbot
2021-12-10 19:06:21bc1bd22792345f7316a1e96d4ddb3916DLL dlln/a
n/a
2021-12-10 18:57:14b7498565e002d354687d4ef9ff1b33abDLL dlln/a
n/a
2021-12-10 14:25:115205821053de2cdee28d05aa43d20e9dDLL dlln/a
Quakbot